CVE-2016-3351

KEV · Ransomware

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Vendor / Project: Microsoft
Product: Internet Explorer and Edge
Date added: May 24, 2022
Due date: Jun 14, 2022
Known ransomware use: Known
CWEs: CWE-200

Description

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-3351